{"id":"CVE-2015-7682","aliases":["EUVD-2015-7584","GHSA-f8wx-h5g6-hjg3"],"status":"published","title":"Multiple SQL injection vulnerabilities in pie-register/pie-register.php in the Pie Register...","description":"Multiple SQL injection vulnerabilities in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allow remote administrators to execute arbitrary SQL commands via the (1) select_invitaion_code_bulk_option or (2) invi_del_id parameter in the pie-invitation-codes page to wp-admin/admin.php.","severity":{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01383,"percentile":0.7233,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2015-10-16T20:00:00Z","modified":"2026-06-17T00:32:57Z","products":[{"vendor":"genetechsolutions","product":"pie_register"}],"references":[{"url":"https://wpvulndb.com/vulnerabilities/8213","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://github.com/GTSolutions/Pie-Register/blob/2.0.19/readme.txt","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/536669/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://packetstormsecurity.com/files/133929/WordPress-Pie-Register-2.0.18-SQL-Injection.html","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7682"},{"url":"https://github.com/advisories/GHSA-f8wx-h5g6-hjg3"}],"sources":{"cve":[{"id":"CVE-2015-7682","description":"Multiple SQL injection vulnerabilities in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allow remote administrators to execute arbitrary SQL commands via the (1) select_invitaion_code_bulk_option or (2) invi_del_id parameter in the pie-invitation-codes page to wp-admin/admin.php.","status":"published","published":"2015-10-16T20:00:00Z","modified":"2024-08-06T07:58:58.921Z","updated_at":"2026-11-02T14:35:44.744952Z"}],"euvd":[{"id":"EUVD-2015-7584","description":"Multiple SQL injection vulnerabilities in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allow remote administrators to execute arbitrary SQL commands via the (1) select_invitaion_code_bulk_option or (2) invi_del_id parameter in the pie-invitation-codes page to wp-admin/admin.php.","status":"published","published":"2015-10-16T20:00:00Z","modified":"2024-08-06T07:58:58Z","updated_at":"2026-11-03T02:21:52.097705Z"}],"ghsa":[{"id":"GHSA-f8wx-h5g6-hjg3","title":"Multiple SQL injection vulnerabilities in pie-register/pie-register.php in the Pie Register...","description":"Multiple SQL injection vulnerabilities in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allow remote administrators to execute arbitrary SQL commands via the (1) select_invitaion_code_bulk_option or (2) invi_del_id parameter in the pie-invitation-codes page to wp-admin/admin.php.","status":"published","published":"2022-05-14T02:47:26Z","modified":"2023-02-02T05:06:18Z","cwes":["CWE-89"],"updated_at":"2026-11-02T14:52:17.172417Z"}],"nvd":[{"id":"CVE-2015-7682","description":"Multiple SQL injection vulnerabilities in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allow remote administrators to execute arbitrary SQL commands via the (1) select_invitaion_code_bulk_option or (2) invi_del_id parameter in the pie-invitation-codes page to wp-admin/admin.php.","status":"published","published":"2015-10-16T20:59:15.747Z","modified":"2026-06-17T00:32:57.7Z","cvss":[{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:03:10.919251Z"}]}}